CVE-2025-0334 in cy-fast

Résumé

par MITRE • 09/01/2025

A vulnerability has been found in leiyuxi cy-fast 1.0 and classified as critical. Affected by this vulnerability is the function listData of the file /sys/user/listData. The manipulation of the argument order leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Responsable: VulDB
• Divulgation: 09/01/2025
• Modérer: accepté
• Entrée: VDB-290821
• CPE: prêt
• CWE: CWE-89 (confirmé)
• Exploitation: Télécharger
• CVSS: 8.8 (NVD)
• EPSS: 0.00475
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-0334
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-0334
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-0334/